Software Product Security Engineer 3

Guide development teams to triage and remediate findings from SAST, DAST, SCA, and bug bounty/vulnerability reports. Serve as a trusted liaison between engineering and security stakeholders, translating risk into practical, prioritized action. Consult on secure architecture, API security, IAM, logging, and secure coding practices across cloud platforms (Azure, GCP, AWS). Integrate and automate security testing within CI/CD pipelines alongside platform and DevOps teams. Help teams manage technical debt, upgrade paths, and software supply chain/SBOM risks. Communicate complex technical risk clearly to both engineers and business stakeholders - without creating panic or friction. This position will leverage broad experience and a jack of all trades in IT maybe an ideal candidate. The team handles compliance activities for cybersecurity, so experience there is a plus.

Scripting, User Stories, Troubleshooting (Problem Solving), Data/Analytics dashboards, Software Development Lifecycle, Software Development, Web Development, TCP/IP, Data Integrity, Microsoft Office, Web Applications, Web Technologies, Cyber Security, Data Modeling, Developer, SharePoint, Web Design & Development Skills Preferred: Tooling, Disaster Recovery, Risk Management, Spring Security, Solution Architecture, Software Development Lifecycle, AIPGEE, Coding, JavaScript, KANBAN, Linux, Network Protocols & Standards, Penetration Testing, J2EE, Salesforce, Spring Boot, Change control , Cloud Computing, Dynatrace, Apache Tomcat, Application Development, Cloud Infrastructure, Computer Security, Google Cloud Platform, ISO 27001, Pega, Problem Solving, React, Application Architect, Burp Suite, Configuration Management, JQuery, Network Security, Java, Analytical skills, Application Design, Business Risk Mgt, IAM, Information Security, JSON, Python, Risk Assessment Experience Required: Engineer 3 Exp: Prac. In 2 coding lang. or adv. Prac. in 1 lang. 6+ years in IT; 4+ years in development Experience Preferred: Certifications are highly valued (CISSP, CISA, CISM, etc.) Additional Information : Overall, we are looking for someone who can understand the developer’s perspective while also bringing a strong cybersecurity and risk-management mindset. The ideal candidate is someone who can sit in the middle, understand the technical details, work through the grey areas, and help the development/business teams arrive at the right security decision Thanks & Regards